This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa
File:                     3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier:          DMu1CqfX/T807Jbjm5wYwb5YHczzLtxluhyvL5CoYlY=
Subject key identifier:   23:B9:34:3F:8C:84:A5:15:68:5F:52:78:2F:87:7A:E8:B2:29:E5:77
Certificate issuer:       /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial:       42D7F79F75FCA51C8E87994F3140F9C2FE0888B8
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa
Signing time:             Tue 06 Jan 2026 19:19:29 +0000
ROA not before:           Tue 06 Jan 2026 19:14:29 +0000
ROA not after:            Tue 05 Jan 2027 19:19:29 +0000
asID:                     22869
IP address blocks:        168.227.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d7:f7:9f:75:fc:a5:1c:8e:87:99:4f:31:40:f9:c2:fe:08:88:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231411337300474BC5489725C8707684F70A876D
        Validity
            Not Before: Jan  6 19:14:29 2026 GMT
            Not After : Jan  5 19:19:29 2027 GMT
        Subject: CN=23B9343F8C84A515685F52782F877AE8B229E577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:81:0a:59:ad:e7:af:24:b8:98:46:79:1f:
                    a8:a2:96:18:e8:ea:12:79:12:97:f7:8e:c6:61:0e:
                    71:c6:23:e5:0c:1b:79:4c:a2:d8:fc:8e:b1:ed:70:
                    44:af:96:50:1e:8d:47:35:69:64:d0:81:75:eb:22:
                    57:ca:34:75:34:93:35:10:3c:cc:34:c6:c7:79:5a:
                    aa:62:9c:83:ca:93:86:9e:1c:4e:ae:0f:c0:a1:3a:
                    1b:cf:5b:07:a7:aa:69:51:25:86:0a:1e:b6:3e:ab:
                    67:53:b7:6c:a8:7d:b6:12:3f:64:22:3c:8b:5b:49:
                    33:e7:dc:cf:3b:d4:94:5b:a7:12:54:23:0f:2a:f1:
                    12:3e:01:b7:bf:ca:dc:dc:f6:9f:4d:27:78:54:75:
                    22:24:bd:58:a5:05:79:6a:ad:40:1c:48:85:18:f7:
                    6d:d7:da:ed:c0:1c:17:83:23:67:f6:fa:f6:c3:e8:
                    67:3f:67:a0:10:de:a5:b6:f1:52:ea:72:04:b2:5f:
                    c4:c9:72:38:a3:d1:d6:3c:c0:6a:2b:ca:3c:18:fa:
                    73:18:1a:f6:22:0c:d4:84:28:95:db:ff:60:00:1a:
                    f6:b2:0e:83:3a:0c:7d:6a:81:bd:86:2a:c1:f0:a9:
                    bf:02:5e:5a:19:58:33:35:cc:53:06:00:fb:7a:c8:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:34:3F:8C:84:A5:15:68:5F:52:78:2F:87:7A:E8:B2:29:E5:77
            X509v3 Authority Key Identifier:
                keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3136382e3232372e3132382e302f32322d3234203d3e203232383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:5f:57:7f:bd:09:12:15:85:d8:32:91:59:2e:fe:83:e8:
         c6:a0:e0:d2:de:b9:48:76:32:1c:00:b2:6f:da:6a:76:83:ae:
         d3:e1:61:d0:27:90:d8:83:d9:01:95:66:d0:58:9a:90:80:49:
         a8:2b:fd:fb:c8:f0:c5:1d:fd:92:dd:93:c5:e6:d3:78:a2:72:
         0d:5b:01:64:c4:40:19:42:46:ad:fe:59:a3:df:68:a0:f0:b0:
         60:1d:c7:7e:f8:17:7b:5f:5f:1c:b5:36:be:2c:fe:57:15:4e:
         66:f8:ee:b0:2d:5c:f6:0a:94:7f:34:9b:62:f8:c3:87:36:e8:
         aa:1a:80:2c:bf:8d:f5:1b:4b:0b:fc:17:6f:41:f5:99:0e:1e:
         53:13:b9:a0:f4:29:11:3f:c4:d9:6a:68:a4:d2:93:38:4a:f7:
         26:01:99:3f:33:82:bb:14:db:2b:e8:6c:4b:fd:04:63:94:1e:
         a7:6a:f7:20:2f:8c:2e:db:35:d3:e8:91:cf:a1:27:69:7e:19:
         e0:1a:12:0e:c0:8c:f8:a7:91:2d:5b:ce:1e:c3:91:9a:b7:5b:
         93:ed:3e:4a:6a:1d:34:4a:33:cf:81:6c:16:67:6a:86:c5:5b:
         72:c1:d4:e3:08:d7:34:23:50:8c:77:64:8a:7e:b5:e2:c9:cb:
         67:9a:e9:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQtf3n3X8pRyOh5lPMUD5wv4IiLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxNDExMzM3MzAwNDc0QkM1NDg5NzI1Qzg3MDc2ODRG
NzBBODc2RDAeFw0yNjAxMDYxOTE0MjlaFw0yNzAxMDUxOTE5MjlaMDMxMTAvBgNV
BAMTKDIzQjkzNDNGOEM4NEE1MTU2ODVGNTI3ODJGODc3QUU4QjIyOUU1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd1IEKWa3nryS4mEZ5H6iilhjo
6hJ5Epf3jsZhDnHGI+UMG3lMotj8jrHtcESvllAejUc1aWTQgXXrIlfKNHU0kzUQ
PMw0xsd5WqpinIPKk4aeHE6uD8ChOhvPWwenqmlRJYYKHrY+q2dTt2yofbYSP2Qi
PItbSTPn3M871JRbpxJUIw8q8RI+Abe/ytzc9p9NJ3hUdSIkvVilBXlqrUAcSIUY
923X2u3AHBeDI2f2+vbD6Gc/Z6AQ3qW28VLqcgSyX8TJcjij0dY8wGoryjwY+nMY
GvYiDNSEKJXb/2AAGvayDoM6DH1qgb2GKsHwqb8CXloZWDM1zFMGAPt6yJebAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUI7k0P4yEpRVoX1J4L4d66LIp5XcwHwYDVR0j
BBgwFoAUIxQRM3MAR0vFSJclyHB2hPcKh20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EODBGRDBENTc0NkU0NDg2OTc0Rjg3RjBCNThBQTNEMjJE
RjdBOUQzNDAwMzdFNzNENURBNDRBMzkxRUUyNjQwLzAvMjMxNDExMzM3MzAwNDc0
QkM1NDg5NzI1Qzg3MDc2ODRGNzBBODc2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzE0MTEzMzczMDA0NzRCQzU0
ODk3MjVDODcwNzY4NEY3MEE4NzZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDgwRkQwRDU3NDZFNDQ4Njk3NEY4N0YwQjU4QUEzRDIyREY3QTlEMzQw
MDM3RTczRDVEQTQ0QTM5MUVFMjY0MC8wLzMxMzYzODJlMzIzMjM3MmUzMTMyMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMyMzgzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqOOA
MA0GCSqGSIb3DQEBCwUAA4IBAQA9NV9Xf70JEhWF2DKRWS7+g+jGoODS3rlIdjIc
ALJv2mp2g67T4WHQJ5DYg9kBlWbQWJqQgEmoK/37yPDFHf2S3ZPF5tN4onINWwFk
xEAZQkat/lmj32ig8LBgHcd++Bd7X18ctTa+LP5XFU5m+O6wLVz2CpR/NJti+MOH
NuiqGoAsv431G0sL/BdvQfWZDh5TE7mg9CkRP8TZamik0pM4SvcmAZk/M4K7FNsr
6GxL/QRjlB6navcgL4wu2zXT6JHPoSdpfhngGhIOwIz4p5EtW84ew5Gat1uT7T5K
ah00SjPPgWwWZ2qGxVtywdTjCNc0I1CMd2SKfrXiyctnmunO
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:46:24 2026 by rpki-client